Information Disclosure

🗓️ 02 Oct 2023 18:07:27Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

Firefox vulnerability in Windows URL shortcut leads to NTLM credential lea

Reporter	Title	Published	Views	Family All 68
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1	10 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.8.0-alt1	15 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.8ESR) have affected APM Synthetic Playback Agent	19 Apr 202312:45	–	ibm
ATTACKERKB	CVE-2023-25734	2 Jun 202317:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1983)	7 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-007)	27 Sep 202300:00	–	nessus
Tenable Nessus	GLSA-202305-35 : Mozilla Firefox: Multiple Vulnerabilities	30 May 202300:00	–	nessus
Tenable Nessus	GLSA-202305-36 : Mozilla Thunderbird: Multiple Vulnerabilities	30 May 202300:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 102.8	14 Feb 202300:00	–	nessus

Vulners

Node

firefox-esr firefox-esrMatch68.8.0-r0os

AND

firefox-esr firefox-esrMatch78.10.0-r0os

AND

firefox-esr firefox-esrMatch91.7.1-r0os

AND

firefox-esr firefox-esrMatch102.5.0-r1os

AND

firefox-esr firefox-esrMatch91.8.0-r0os

AND

firefox-esr firefox-esrMatch78.12.0-r0os

AND

firefox-esr firefox-esrMatch91.11.0-r1os

AND

firefox-esr firefox-esrMatch78.8.0-r0os

AND

firefox-esr firefox-esrMatch102.6.0-r1os

AND

firefox-esr firefox-esrMatch91.7.0-r2os

AND

firefox-esr firefox-esrMatch91.6.0-r1os

AND

firefox-esr firefox-esrMatch91.5.1-r0os

AND

firefox-esr firefox-esrMatch102.7.0-r2os

AND

firefox-esr firefox-esrMatch91.8.0-r1os

AND

firefox-esr firefox-esrMatch91.11.0-r2os

AND

firefox-esr firefox-esrMatch91.6.1-r0os

AND

firefox-esr firefox-esrMatch68.6.1-r0os

AND

firefox-esr firefox-esrMatch91.9.0-r0os

AND

firefox-esr firefox-esrMatch102.2.0-r4os

AND

firefox-esr firefox-esrMatch102.5.0-r2os

AND

firefox-esr firefox-esrMatch91.4.0-r1os

AND

firefox-esr firefox-esrMatch102.0.1-r0os

AND

firefox-esr firefox-esrMatch102.1.0-r1os

AND

firefox-esr firefox-esrMatch91.5.0-r0os

AND

firefox-esr firefox-esrMatch102.4.0-r1os

AND

firefox-esr firefox-esrMatch91.3.0-r0os

AND

firefox-esr firefox-esrMatch102.5.0-r4os

AND

firefox-esr firefox-esrMatch102.3.0-r1os

AND

firefox-esr firefox-esrMatch68.7.0-r1os

AND

firefox-esr firefox-esrMatch91.10.0-r0os

AND

firefox-esr firefox-esrMatch78.8.0-r1os

AND

firefox-esr firefox-esrMatch102.1.0-r0os

AND

firefox-esr firefox-esrMatch102.2.0-r0os

AND

firefox-esr firefox-esrMatch102.7.0-r0os

AND

firefox-esr firefox-esrMatch91.9.1-r0os

AND

firefox-esr firefox-esrMatch78.13.0-r0os

AND

firefox-esr firefox-esrMatch102.3.0-r0os

AND

firefox-esr firefox-esrMatch68.6.0-r0os

AND

firefox-esr firefox-esrMatch78.9.0-r0os

AND

firefox-esr firefox-esrMatch91.2.0-r1os

AND

firefox-esr firefox-esrMatch102.1.0-r2os

AND

firefox-esr firefox-esrMatch102.6.0-r0os

AND

firefox-esr firefox-esrMatch68.7.0-r2os

AND

firefox-esr firefox-esrMatch68.5.0-r1os

AND

firefox-esr firefox-esrMatch78.11.0-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2023-05/
mozilla	www.mozilla.org/security/advisories/mfsa2023-06/
mozilla	www.mozilla.org/security/advisories/mfsa2023-07/

09 Jan 2025 23:19Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.1

EPSS0.00775

SSVC